EUVD-2026-45533

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.1 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

CVE-2026-63850 drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.0 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

EUVD-2026-45534

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v5.0.0 enc ring VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

CVE-2026-63849

CVE-2026-63849 affects Linux kernel DRM/AMDGPU VCN: the VCN encoder/decoder rings (v5.0.1 enc ring) do not support 64-bit user fence writes, and submissions using user fences are rejected. This is caused by set_no_user_fence for the VCN enc ring, fixed via a cherry-pick in the referenced commit. ...

OESA-2026-3084 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2026-3060 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

PT-2026-61169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VCN encoder and decoder rings in the drm/amdgpu/vcn component do not support 64-bit user fence writes. This issue leads to the rejection of CS submissions that utilize user fences...

PT-2026-61170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the AMDGPU VCN 4.0 path contains an issue where VCN encoder and decoder rings do not support 64-bit user fence writes. This necessitates the rejection of CS...

PT-2026-61166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VCN encoder and decoder rings in the drm/amdgpu/vcn component do not support 64-bit user fence writes. This issue leads to the rejection of CS submissions that utilize user fences...

PT-2026-61172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VCN encoder and decoder rings in the drm/amdgpu/vcn component do not support 64-bit user fence writes. This issue leads to the rejection of CS submissions that utilize user fences...

PT-2026-61171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VCN encoder and decoder rings in the drm/amdgpu/vcn component do not support 64-bit user fence writes. This issue leads to the rejection of CS submissions that utilize user fences...

The vulnerability of the ASHLAR encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the MSL encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick 7.x < 7.1.2-19 Heap Buffer Overflow

The remote host has a version of ImageMagick installed that is 7.x prior to 7.1.2-19. It is, therefore, affected by a heap buffer overflow vulnerability: - ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing...

CVE-2026-55173

WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026-33482 was incomplete and still does not neutralize a single & the shell background operator. CVE-2026-33482 reported that sanitizeFFmpegCommand...

EUVD-2026-45040

WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026-33482 was incomplete and still does not neutralize a single & the shell background operator. CVE-2026-33482 reported that sanitizeFFmpegCommand...

MAL-2026-10758 Malicious code in mfq-private-encoder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2c0f78a3c5677481645e05e125f32273435610a1208a17ca4f852cb7f56b0e The package advertises a Python source-code encoder but has no local codec. The encodefile function and public encode API read the user-supplied Pyth...

Security update for python-Pillow

This update for python-Pillow fixes the following issues CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. CVE-2026-59197: heap out-of-bounds write in ImageFilter.RankFilter via integer overflow in ImagingExpand bsc1271418. CVE-2026-59198: out-of-bound...